There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The faad_resetbits function in
    libfaad/bits.c is affected by a buffer overflow vulnerability. The number of bits to be read is determined
    by ld->buffer_size - words*4, cast to uint32. If ld->buffer_size - words*4 is negative, a buffer overflow
    is later performed via getdword_n(&ld->start[words], ld->bytes_left). (CVE-2019-15296)

  - An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There was a heap-based buffer
    overflow in the function excluded_channels() in libfaad/syntax.c. (CVE-2018-19502)

  - An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There was a stack-based buffer
    overflow in the function calculate_gain() in libfaad/sbr_hfadj.c. (CVE-2018-19503)

  - An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There is a NULL pointer
    dereference in ifilter_bank() in libfaad/filtbank.c. (CVE-2018-19504)

  - There is a stack-based buffer underflow in the third instance of the calculate_gain function in
    libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. A crafted input will lead to a
    denial of service or possibly unspecified other impact because limiting the additional noise energy level
    is mishandled for the G_max <= G case. (CVE-2018-20194)

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在 Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1 中發現一個問題，libfaad/sbr_hfadj.c 的 calculate_gain() 函式中有一個堆疊型緩衝區溢位問題。 (CVE-2018-19503)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

在免費軟體進階音訊編碼器 faad2 中發現數個弱點。如果處理特製的 MPEG AAC 檔案，這些弱點可讓遠端攻擊者導致拒絕服務或者可能執行任意程式碼。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1 中发现了一个问题。libfaad/sbr_hfadj.c 的 calculate_gain() 函数中存在基于堆栈的缓冲区溢出。 (CVE-2018-19503)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Freeware 高级音频编码器 faad2 中发现多个漏洞。如果处理了特制的 MPEG AAC 文件，这些漏洞可让远程攻击者造成拒绝服务，或可能会造成执行任意代码。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1で問題が発見されました。libfaad/sbr_hfadj.c の関数 Calculate_gain() にスタックベースのバッファオーバーフローがありました。CVE-2018-19503

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Freeware Advanced Audio Coderであるfaad2に、複数の脆弱性が発見されました。これらの脆弱性により、細工されたMPEG AACファイルが処理された場合、リモートの攻撃者がサービス拒否を引き起こしたり、任意のコードを実行したりする可能性があります。

The remote host is affected by the vulnerability described in GLSA-202006-17 (FAAD2: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in FAAD2. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There was a stack-based buffer     overflow in the function calculate_gain() in libfaad/sbr_hfadj.c. (CVE-2018-19503)

Note that Nessus relies on the presence of the package as reported by the vendor.

Multiple vulnerabilities have been discovered in faad2, the Freeware Advanced Audio Coder. These vulnerabilities might allow remote attackers to cause denial-of-service, or potentially execute arbitrary code if crafted MPEG AAC files are processed.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
404283	Alpine: multiple faad2 packages: security update to 2.9.0-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	high
404283	Alpine: multiple faad2 packages: security update to 2.9.0-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	high
254217	Linux Distros 未修補的弱點：CVE-2018-19503	Nessus	Misc.	2025/8/24	2025/8/24	high
128782	Debian DSA-4522-1：faad2 - 安全性更新	Nessus	Debian Local Security Checks	2019/9/16	2024/4/26	high
254217	Linux Distros 未修补的漏洞：CVE-2018-19503	Nessus	Misc.	2025/8/24	2025/8/24	high
128782	Debian DSA-4522-1：faad2 - 安全更新	Nessus	Debian Local Security Checks	2019/9/16	2024/4/26	high
254217	Linux Distros のパッチ未適用の脆弱性: CVE-2018-19503	Nessus	Misc.	2025/8/24	2025/8/24	high
128782	Debian DSA-4522-1 : faad2 - セキュリティ更新	Nessus	Debian Local Security Checks	2019/9/16	2024/4/26	high
137454	GLSA-202006-17 : FAAD2: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2020/6/17	2024/3/7	high
254217	Linux Distros Unpatched Vulnerability : CVE-2018-19503	Nessus	Misc.	2025/8/24	2025/8/24	high
128782	Debian DSA-4522-1 : faad2 - security update	Nessus	Debian Local Security Checks	2019/9/16	2024/4/26	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high